About Městobraní
Privacy
A technical overview of the data Městobraní needs for guest play and secure room recovery.
What the game processes
To run a match, we store the chosen display name, game state, results, a pseudonymous seat identifier, and last-activity times. The secret seat token exists only in an HttpOnly cookie; the server stores only its hash.
Security and operations
Network identifiers are used only to resist abuse and are hashed before storage. Operational logs must not contain player names, recovery codes, cookies, or complete game state.
Optional analytics
PostHog EU starts only after explicit consent and only when configured by the operator. We do not send names, room codes, question text, tokens, or complete game state. Consent can be revoked from cookie settings.
Retention and your rights
Retention for finished and abandoned games is configurable, and automatic game deletion stays off until the operator chooses a policy. Exact periods, legal basis, controller identity, and request procedures must be supplied before public launch.